Senior Cybersecurity Engineer – Identity Platform and Access Management

NVIDIA•Santa Clara, CA

5d•$196,000 - $310,500

About The Position

NVIDIA's Enterprise Security organization is looking for a Senior Cybersecurity Engineer – Identity Platform & Access Management to lead the development, deployment, and improvement of large-scale identity and access management systems. You will establish and guide the identity framework that safeguards developers, services, and AI agents throughout NVIDIA's worldwide infrastructure across cloud, on-premises, and managed device settings. This is a high-impact, multi-functional position linking security architecture, platform engineering, and AI infrastructure. You will work closely with engineering leads in device management, identity governance, and platform teams to develop technical strategy and operational responsibility. Your focus will be on modernizing authentication patterns for agentic AI and developer-scale workflows.

Requirements

Bachelor's degree or Master's degree or equivalent experience in Computer Science or a related field.
Over 12+ years of experience in platform or infrastructure engineering, with extensive knowledge in authentication, authorization, and identity systems including modern token-based protocols, federated identity standards, and device attestation.
Demonstrable experience crafting and leading identity or access management platforms within large-scale organizations.
Solid understanding of Zero Trust architecture, identity-based attack techniques, and modern IAM controls.
Experience securing automated or computer-controlled workflows, including service-to-service identity and non-human access patterns.
Excellent written and verbal communication skills; comfortable driving architecture decisions across senior and executive audiences.

Nice To Haves

Established background in building token services or centralized auth platforms that run at enterprise scale with high availability and low latency.
Deep understanding of delegated access flows, managed device trust models, and the nuances of securing both human and non-human identities.
Demonstrated ability to establish agent or service identities as an outstanding construct in complex, multi-tenant environments.
Hands-on application development experience with the ability to contribute directly to auth libraries and SDKs.
Experience leading enterprise identity transformations or directory modernization programs, including migration from legacy authentication protocols at scale.

Responsibilities

Lead enterprise identity strategy and platform architecture, encompassing cloud identity, directory services, and the transition of applications to modern authentication standards (OAuth 2.0, OIDC, SAML).
Define and implement reference architectures for secure authentication across CLI, browser, and agentic workflows.
Architect and stand up a centralized token issuance and validation service for developer and CLI workflows, ensuring consistent trust and verification across device and session contexts.
Establish agent identities as an outstanding element within the identity platform, enabling robust access control and audit-ability for automated and machine-assisted workflows.
Build and implement advanced identity security controls such as Conditional Access policies, Privileged Identity Management (PIM), and risk-based authentication.
Scale device management and identity governance systems to meet the rapidly growing demands of AI-powered operations. Ensure reliability, performance, and compliance across large organizational environments.
Partner with multi-functional collaborators across security, infrastructure, and product teams to align on architecture, build strategy, and operational ownership.